$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa File: 99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa (raw, json) Hash identifier: qDEuGvFzNKlUZQzoLXjlMhN+BvzmvNcSxOtfSLHxLTg= Subject key identifier: FB:1B:8C:3B:53:54:64:71:61:74:14:9B:E2:7E:C4:5C:01:00:8B:13 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D733CB3CF8A0ACE4BC3A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 3257 IP address blocks: 142.111.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:33:cb:3c:f8:a0:ac:e4:bc:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=bafd33c4-d694-48f0-a93a-45914545c142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:f0:b7:e3:12:61:ee:aa:de:70:54:e8:8f: a0:5c:28:12:37:29:ee:67:a0:57:25:bb:79:30:aa: 79:2f:b7:dc:d0:b8:ac:cb:92:fc:45:fe:71:5e:59: 48:7b:75:66:c9:15:3e:5d:59:af:45:f2:8a:8d:fb: 2d:bb:fb:e1:0f:6c:55:ba:94:43:23:33:d0:03:77: 80:a0:4f:fd:9b:4c:99:93:59:eb:d8:ab:fb:4f:d5: 9a:45:d3:27:14:e1:46:d6:e9:28:a2:4a:7f:63:17: ca:78:1f:f7:65:2d:d5:f8:03:63:18:c0:fd:58:f1: 4d:13:f9:0d:d7:70:69:66:6a:e1:d7:7f:d5:7c:f7: 95:76:f6:1e:58:72:61:b1:4b:07:a2:5b:40:da:31: 42:98:0a:86:d9:28:c2:b9:b9:3e:c6:3a:e3:85:f9: 80:69:2f:ba:93:d1:1b:9f:22:4b:25:e0:a6:a2:a2: da:76:3d:89:c8:16:3c:c0:90:e2:c3:21:d9:46:d8: fe:a0:f4:b1:fc:a7:de:81:76:11:3d:d2:3e:fc:bb: 51:7a:5f:a6:10:a4:0a:57:57:9e:0a:8f:3b:fa:aa: 43:3b:c9:95:a7:69:4f:37:a5:79:64:1b:8f:65:65: b7:34:9a:48:af:05:d4:f5:c5:9f:92:f0:b3:90:5d: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1B:8C:3B:53:54:64:71:61:74:14:9B:E2:7E:C4:5C:01:00:8B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/99f3cfea-9cb6-35b6-826e-4dfa16b214d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:66:ed:e9:a5:c1:b3:8f:52:f5:34:d5:f2:e6:f3:67:ef:91: c1:e1:7e:21:a0:8a:7a:d6:34:bc:a0:a2:e5:25:8a:e6:e5:06: 9e:04:aa:3d:f9:ca:ed:9f:7f:34:58:90:19:70:cc:37:85:ce: 76:be:4c:b2:1a:8a:2b:d1:c9:b6:55:90:6c:d2:c1:a6:78:7d: 02:46:9b:89:85:18:53:3e:fd:32:29:93:74:f8:15:63:49:24: ea:7a:b7:83:f5:a5:92:f2:08:97:82:ae:59:b6:dc:ab:15:45: 8d:a2:99:8e:3c:30:23:34:c6:88:db:cb:5e:48:73:31:c8:be: 3c:53:35:b8:53:42:f4:19:61:57:5b:23:eb:20:bb:c7:a2:3c: f8:cc:d2:b2:95:d3:0a:7c:6c:fc:98:4f:fc:f7:eb:e1:9a:3f: 26:ef:1d:e9:fe:6e:99:23:1c:35:43:56:3e:e2:58:37:f6:f4: 33:be:36:76:30:ac:bd:b9:2d:28:87:62:ee:10:bf:07:38:47: 28:0f:b1:4c:fd:b2:9f:8f:1e:d1:bf:38:c8:d2:16:46:dc:f7: f3:e5:4a:97:ab:48:d9:3d:27:3b:37:e0:47:21:5f:6a:d6:9b: 3e:50:a0:d8:32:7d:85:2b:71:20:a5:47:4f:82:78:ac:eb:1b: 18:90:59:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zPLPPigrOS8OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YmFmZDMzYzQtZDY5NC00OGYwLWE5M2EtNDU5MTQ1NDVjMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnILwt+MSYe6q3nBU6I+gXCgSNynuZ6BXJbt5 MKp5L7fc0Lisy5L8Rf5xXllIe3VmyRU+XVmvRfKKjfstu/vhD2xVupRDIzPQA3eA oE/9m0yZk1nr2Kv7T9WaRdMnFOFG1ukookp/YxfKeB/3ZS3V+ANjGMD9WPFNE/kN 13BpZmrh13/VfPeVdvYeWHJhsUsHoltA2jFCmAqG2SjCubk+xjrjhfmAaS+6k9Eb nyJLJeCmoqLadj2JyBY8wJDiwyHZRtj+oPSx/KfegXYRPdI+/LtRel+mEKQKV1ee Co87+qpDO8mVp2lPN6V5ZBuPZWW3NJpIrwXU9cWfkvCzkF2lSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsbjDtTVGRxYXQUm+J+xFwBAIsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTlmM2NmZWEtOWNiNi0z NWI2LTgyNmUtNGRmYTE2YjIxNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1m7emlwbOPUvU01fLm82fvkcHhfiGginrWNLygouUliublBp4Eqj35 yu2ffzRYkBlwzDeFzna+TLIaiivRybZVkGzSwaZ4fQJGm4mFGFM+/TIpk3T4FWNJ JOp6t4P1pZLyCJeCrlm23KsVRY2imY48MCM0xojby15IczHIvjxTNbhTQvQZYVdb I+sgu8eiPPjM0rKV0wp8bPyYT/z36+GaPybvHen+bpkjHDVDVj7iWDf29DO+NnYw rL25LSiHYu4Qvwc4RygPsUz9sp+PHtG/OMjSFkbc9/PlSperSNk9Jzs34EchX2rW mz5QoNgyfYUrcSClR0+CeKzrGxiQWbc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:42 2025 by rpki-client